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We continue the investigation of parameterized extensions of Linear Temporal Logic (LTL) that 
retain the attractive algorithmic properties of LTL: a polynomial space model checking algorithm 
and a doubly-exponential time algorithm for solving games. Alur et al. and Kupferman et al. showed 
that this is the case for Parametric LTL (PLTL) and PROMPT-LTL respectively, which have temporal 
operators equipped with variables that bound their scope in time. Later, this was also shown to be 
true for Parametric LDL (PLDL), which extends PLTL to be able to express all o-regular properties. 

Here, we generalize PLTL to systems with costs, i.e., we do not bound the scope of operators in 
time, but bound the scope in terms of the cost accumulated during time. Again, we show that model 
checking and solving games for specifications in PLTL with costs is not harder than the corresponding 
problems for LTL. Finally, we discuss PLDL with costs and extensions to multiple cost functions. 


1 Introduction 

Parameterized linear temporal logics address a serious shortcoming of Linear-temporal Logic (LTL): 
LTL is not able to express timing constraints, e.g., while G{q —Fp) expresses that every request q is 
eventually answered by a response p, the waiting time between requests and responses might diverge. 
This is typically not the desired behavior, but cannot be ruled out by LTL. 

To overcome this shortcoming, Alur et al. introduced parameterized LTL |Ti, which extends LTL with 
parameterized operators of the form F<jc and G<j„ where x and y are variables. The formula G F <xP) 

expresses that every request is answered within an arbitrary, but fixed number of steps a{x). Here, a is 
a variable valuation, a mapping of variables to natural numbers. Typically, one is interested in whether 
a PLTL formula is satisfied wifh respecf fo some variable valuation. For example, fhe model checking 
problem asks whefher a given fransifion system satisfies a given PLTL specificafion (p wifh respecf fo 
some a, i.e., whefher every pafh safisfies cp wifh respecf fo a. Similarly, solving infinile games amounfs 
fo determining whefher fhere is an a such fhaf Player 0 has a sfrafegy such fhaf every play fhaf is consis- 
fenf wifh fhe sfrafegy safisfies fhe winning condition wifh respecf fo a. Alur el al. showed fhaf fhe PLTL 
model checking problem is PSPACE-complefe. Kupferman ef al. later considered PROMPT-LTL HH, 
which can be seen as fhe fragmenl of PLTL wilhoul fhe paramelerized always operator, and showed fhaf 
PROMPT-LTL model checking is still PSPACE-complefe and fhaf PROMPT-LTL realizabilify, an ab- 
sfract nofion of infinite game, is 2ExpTime -complete. While fhe resulfs of Alur el al. relied on involved 
pumping argumenfs, fhe resulfs of Kupferman el al. where all based on fhe so-called alfemafing-color 
technique, which basically allows fo reduce PROMPT-LTL to LTL. Lurlhermore, fhe resulf on realiz- 
abilily was exfended to infinile games on graphs |[29ll . again using fhe alternating-color lechnique. 

Anolher serious shorfcoming of LTL (and ils parameterized varianls) is fheir expressiveness: LTL is 
equi-expressive fo firsl-order logic wifh order and fhus nol as expressive as m-regular expressions. This 
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shortcoming was addressed by a long line of temporal logics lfT4l[T^l2^l27l[2^ with regular expressions, 
finite automata, or grammar operators to obtain the full expressivity of the ft)-regular languages. One of 
these logics is Linear Dynamic Logic (LDL), which has temporal operators {r) and [r], where r is a 
regular expression. For example, the formula [ro] (^ —>■ (ri) p) holds in a word w, if for every request at 
a position n such that wq • • ■ >v„ matches ro, there is a position n! >n such that p holds at n' and w„ • • ■ Wn' 
matches ri. Intuitively, the diamond operator corresponds to the eventuality of LTL, but is guarded by a 
regular expression. Dually, the box-operator is a guarded always. Although LDL is more expressive than 
LTL, its algorithmic properties are similar: model checking is PS PACE-complete and solving games is 
2ExpTiME-complete 12^ . 

All these logics tackle one shortcoming, but not both simultaneously. This was achieved for the 
first time by adding parameterized operators to LDL. The logic, called parameterized LDL (PLDL) ifTSl 
M, has additional operators and with the expected semantics: the variables bound the 

scope of the operator. And even for this logic, which has parameters and is more expressive than LTL, 
model checking is still PS PACE-complete and solving games is 2ExpTlME-complete. Again, these 
problems were solved by an application of the alternating-color technique. One has to overcome some 
technicalities, but the general proof technique is the same as for PROMPT-ETE. 

The decision problems for the parameterized logics mentioned above are boundedness problems, 
e.g., one asks for an upper bound on the waiting times between requests and responses in case of the 
formula G(g —> F<xp). Recently, more general boundedness problems in logics and automata received 
a lot of attention to obtain decidable quantitative extensions of monadic second-order logic and better 
synthesis algorithms. In general, boundedness problems are undecidable for automata with counters, 
but become decidable if the acceptance conditions can refer to boundedness properties of the counters, 
but the transition relation has no access to counter values. Recent advances include logics and automata 
with bounds |l3l|6l, satisfiability algorithms for these logics ||4l|5l|7l|251, and regular cost-functions ifT^ . 
However, these formalisms, while very expressive, are intractable and thus not suitable for verification 
and synthesis. Thus, less expressive formalisms were studied that appear more suitable for practical 
applications, e.g., finitary parity ifTTl . parity with costs ifTTl . energy-parity ifTOl . mean-payoff-parity lfT2l . 
consumption games fS ], and the use of weighted automata for specifying quantitative properties ||2]|3. 
In particular, the parity condition with cost is defined in graphs whose edges are weighted by natural 
numbers (interpreted as costs) and requires the existence of a bound b such that almost every occurrence 
of an odd color is followed by an occurrence of a larger even color such that the cost between these 
positions is at most b. Although strictly stronger than the classical parity condition, solving parity games 
with costs is as hard as solving parity games 1201 . 


Our contribution: We investigate parameterized temporal logics in a weighted setting similar to 
the one of parity conditions with costs: our graphs are equipped with cost-functions that label the edges 
with natural numbers and parameterized operators are now evaluated with respect to cost instead of time, 
i.e., the parameters bound the accumulated cost instead of the elapsed time. Thus, the formula G(^ —> 
F<xP) requires that every request q is answered with cost at most a{x). We show the following results 
about PETE with costs (cPETE): 

Eirst, we refined the alternating-color technique to the cost-setting, which requires to tackle some 
technical problems induced by the fact that accumulated cost, unlike time, does not increase in every 
step, e.g., if an edge with cost zero is traversed. 

Second, we show that Kupferman et al.’s proofs based on the alternating-color technique can be 
adapted to the cost-setting as well. Eor model-checking, we again obtain PSPACE-completeness while 
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solving games is still 2ExpTlME-complete. 

Third, we consider PLDL with costs (cPLDL), which is defined as expected. Again, the complexity 
does not increase: model checking is PS PACE-complete while solving games is 2ExpTlME-complete. 

Eourth, we generalize both logics to a setting with multiple cost-functions. Now, the parameterized 
temporal operators have another parameter i that determines the cost-function under which they are 
evaluated. Even these extensions do not increase complexity: model checking is again PS PACE-complete 
while solving games is still 2ExpTlME-complete. 

Eifth, we also investigate model checking and solving games as an optimization problem, which is 
a very natural view on the problems, i.e., we are interested in computing the optimal variable valuation 
such that a given system satisfies a given specificafion. Eor cPETE and cPEDE, we show fhaf fhe model 
checking opfimizafion problem can be solved in polynomial space while fhe optimization problem for 
infinife games can be solved in friply-exponenfial fime. These resulfs are similar fo fhe ones obfained 
for PETE |[29]| . In particular, fhe exponenfial gap befween fhe decision and fhe optimization varianf of 
solving infinite games exisfs already for PETE. 

All proofs omitted due fo space resfricfions can be found in fhe full version OOl . 


2 Parametric LTL with Costs 

Eef y be an infinife sef of variables and lef P be a sef of atomic propositions. The formulae of cPETE 
are given by fhe grammar 

(p::=p\^p\ (pA(p\ (pW (p\ Xtp \(pC(p\ (pRtp \ F<z(p \ 

where p ^ P and z^y ■ We use fhe derived operafors tt :=p V -ip and f f :=p A -ip for some fixed 
p ^P, F(p :=ttU(p, and Gtp :=f fR(p. Eurfhermore, we use p^ tp and -ip —)• (p as shorthand for -ipV tp 
and p\/ tp, respectively. Additional derived operators are infroduced on page 1 147 1 

The sef of subformulae of a cPETE formula tp is denofed by cl((p) and we define fhe size of tp fo 
be fhe cardinalify of cl((p). Eurfhermore, we define varF((p) = {z G | G cl((p)} fo be fhe sef of 
variables parameterizing evenfually operators in tp, varoitp) = {z G iP | G<^y G cl((p)} fo be fhe sef of 
variables parameterizing always operators in tp, and sef var((p) = varF(<p) U varG(<p). 

cPETE is evaluated on so-called cosf-fraces (fraces for shorf) of fhe form w = wqCo wi ci W 2 C 2 • • • G 
( 2 ^ ■ N) which encode fhe evolution of fhe system in terms of fhe atomic propositions fhaf hold frue 
in each fime insfance, and fhe cosf of changing fhe system sfafe. The cosf of fhe frace w is defined as 
csf (w) = L;>o Cj, which mighf be infinife. A finife cosf-frace is required fo begin and end wifh an elemenf 
of 2^. The cosf csf(w) of a finife cosf-frace w = wqcqW\C\ ■ ■ ■ c„_iw„ is defined as csf(w) = L/=o 

Eurfhermore, we require fhe existence of a distinguished atomic proposition K such fhaf all cosf- 
fraces satisfy Cy>0 if and only if fc G wy+i, i.e., fc indicates fhaf fhe lasf step had non-zero cosf. We use 
fhe proposifion fC fo reason abouf cosfs: for example, we are able to express whefher a frace has cosf zero 
or 00 . In the following, we will ensure that all our systems only allow traces that satisfy this assumption. 

Also, to evaluate formulas we need to instantiate the variables parameterizing the temporal operators. 
To this end, we define a variable valuation to be a mapping a: 7^ —N. Now, we can define the model 
relation between a cost-trace w = wqCqW\C\W 2 C 2 ■ ■ ■, a position n of w, a variable valuation a, and 
a cPETE formula as follows: 

• (>v,n, a) 1= p if and only if p G w„, 

• (>v,n, a) \= ->p if and only if p ^ >v„. 
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• {w,n,a) 1= (p A v^if and only if {w,n,a) \= (p and {w,n,a) \= ip", 

• {w,n,a) \= (pW Y if and only if {w,n,a) |= (p or {w,n,a) \= ip, 

• {w,n,a) \= X(p if and only if (w,n + 1, a) [= (p, 

• {w,n, a) ^ (pUip if and only if there exists a y > 0 such that (w,n + j, a) |= tp and {w,n + k, a) \=(p 
for every k in the range 0 < ^ < j, 

• {w,n, a) 1= (pRtp if and only if for every j > 0: either (w,n + y, a) [= tp or there exists akm the 
range 0 < ^ < y such that {w,n + k,a) \= tp, 

• (w,n, a) \= F< 2 (p if and only if there exists a y > 0 with cst(w„c„ • ■ -Cn+y-iWn+y) < a{z) such that 
{w,n + y, a) \= tp, and 

• {w,n,a) \= G<z(p if and only if for every y > 0 with cst(w„c„ • •-c^+z-iw^+y) < (x{z)- {w,n + 

j,oc)h9- 

Note that we recover the semantics of PLTL as the special case where every c„ is equal to one. 

For the sake of brevity, we write (w, a) |= tp instead of (w,0, a) \= (p and say that w is a model of tp 
with respect to a. For variable-free formulas, we even drop the a and write w\= a. 

As usual for parameterized temporal logics, the use of variables has to be restricted: bounding even¬ 
tually and always operators by the same variable leads to an undecidable satisfiability problem | F!|. 

Definition 1. A cPLTL formula cp is well-formed, j/varF((p) n varG(<p) = 0- 

In the following, we only consider well-formed formulas and omit the qualifier “well-formed”. Also, 
we will denote variables in varF(<p) by x and variables in varG(<p) by y, if the formula (p is clear from 
context. 

We consider the following fragments of cPLTL. Let (p be a cPLTL formula: 

• (p is an LTL formula, if var((p) = 0. 

• (p is a cPLTLf formula, if varG(<p) = 0. 

• (p is a cPLTLg formula, if varF(<p) = 0. 

Example 1. 

1. The formula G{q ^<xP) satisfied with respect to Ot, if every request (a position where q 
holds) is followed by a response (a position where p holds) such that the cost of the infix between 
the request and the response is at most <x{x). 

2. The (max-) parity condition with costs H17\l can be expressed in cPLTL via 

where d is the maximal color, which we assume wd.o.g. to be even. However, the Streett condi¬ 
tion with costs snm cannot be expressed in cPLTL, as it is defined with respect to multiple cost 
functions, one for each Streett pair. We extend cPLTL to multiple cost functions in Section^ 

As for PLTL, one can also parameterize the until and the release operator and also consider bounds 
of the form “> z”. However, this does not increase expressiveness of the logic. Thus, we introduce these 
operators by defining them using F<jc and G<v: 

• (pU<xtp:=<pUtpAF<;ctp • G>x<p:=F<xGX(-ifcVG(p) 

• (pR<vtp:=(pRtpVG<3,tp • (pU>j,tp:=G<3,((p AFX(fcA(pUtp)) 

• F> 3 ,,<p:=G<vFX(fcAF(p) • (pR>;c'p:=F<;c((p V GX(-iK-V (pRtp)) 
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Note that we defined cPLTL formulae to be in negation normal form. Nevertheless, a negation can 
be pushed to the atomic propositions using the duality of the operators. Thus, we can define fhe negation 
of a cPLTL formula. 

Lemma 1. For every cPLTL formula tp there exists an efficiently constructible cPLTL formula —>(p s.t. 

1. {w,n, a) \= tp if and only if{w,n, a) ^ ^tpfor every w, every n, and every a, 

2. \^(p\ = \(p\. 

3. If tp is well-formed, then so is -^(p. 

4. If tp is an LTL formula, then so is ^(p. 

5. If tp is a cPLTLp formula, then —i(p is a cPLTLq formula and vice versa. 

Anofher imporfanf properly of paramelerized logics is monolonicily: increasing (decreasing) fhe 
values of paramelerized evenlualily operators (paramelerized always operators) preserves satisfaction. 

Lemma 2. Let tpbe a cPLTL formula and let a and (5 be variable valuations satisfying I5{x) > ot {x) for 
every X € varF((p) and j3(y) < a(y) for every y G varG(<p). If{w,a) ^ (p, then (wffi) \= tp. 

Especially, if we are interested in checking whelher a formula is satisfied wilh respecl to some a, we 
can always recursively replace every subformula G<yyfr by t/r VX(-ifcLF(-ifC A i/r)), as Ibis is equivalenl 
to G<yY wilh respecl to every variable valuation mapping y to zero, which is Ihe smallesl possible value 
for y. Note lhal we have to ignore Ihe currenl Irulh value of fc, as if indicates Ihe cosl of Ihe Iasi Iransilion, 
nol Ihe cosl of Ihe nexl one. 


3 The Alternating-Color Technique for Costs 

Fix a fresh atomic proposition p f: P. We say lhal a cosl-lrace w' = WqCqWjCjW^c^ • • • G • N)* is 

a coloring of a cosl Irace w = wocowici W 2 C 2 • • • G (2^ • N) if n P = w„ and c'„ = c„ for every n, i.e., 
w' and w only differ in Ihe Irulh values of Ihe new proposition p. A position n is a changepoinl of w', if 
n = 0 or if Ihe Irulh value of p in and w'^ differs. A block of w' is an infix w'„c'„ ■ ■ ■ w'^_yj of w' such 
lhal n and n + 7 + 1 are successive changepoinls. If a coloring has only finitely many changepoinls, Ihen 
we refer to ils suffix slarling al Ihe Iasi changepoinl as ils fail, i.e., Ihe coloring is Ihe concatenation of a 
finite number of blocks and ils fail. 

Lei k G N. We say lhal w' is k-bounded if every block and ils fail (if il has one) has cosl al mosl 
k. Dually, we say lhal w' is k-spaced, if every block has cosl al leasl k. Note lhal we do nol have a 
requiremenl on Ihe cosl of Ihe fail in Ibis case. 

Given a cPLTLf formula tp, lei rel((p) denote Ihe LTL formula oblained from tp by recursively re¬ 
placing every subformula by 

(p^pU(^pUrel(t/r))) A (^p ^ ^pU(pUrel(t/r))). 

Inluilively, Ihe relativized formula requires rel(vr) to be satisfied wilhin al mosl one changepoinl. On 
bounded and spaced colorings, tp and rel((p) are “equivalenl”. 

Lemma 3 (cp. Lemma 2.1 of ifTSl l. Let w be a cost-trace and let tp be a cPLTLp formula. 

1. Let (w, a) \= tpfor some variable valuation a. Then, w' ^ rel{(p)for every {k+l)-spaced coloring 
w' ofw, where k = maX;cgvar((p) ct(x). 

2. Let w' ^ rc\[(p) for some k-bounded coloring w' ofw. Then, (w, 0 ;) |= tp, where a{x) = 2k for 
every x. 
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4 Model Checking 

A transition system ^ = {S,sj,E,£,cst) consists of a finite directed graph {S,E), an initial state sj G S, 
a labeling function i: S ^ 2^, and a cost functior0 cst: ^ N. We assume that every state has at least 

one successor to spare us from dealing with finite paths. Recall our requirement on cost-traces having 
a distinguished atomic property K indicating the sign of the cost of the previous transition. Thus, we 
require JZ to satisfy the following property: if fc € £{v'), then cst(v,v') > 0 for every edge (v,v') G E 
leading to v'. Dually, if fc ^ then cst(v,v') = 0 for every edge (v,v') G E. 

A path through ^ is a sequence n = i'0‘S'i52 • • • satisfying and G E for every n. Its 

cost-trace tr(7r) is defined as 

tr(7r) =.f(5o)cst(5oAi)^(‘5'i)cst(5i,52)^(‘5'2)cst(52A3)-- - , 

which satisfies our assumption on the proposition k. 

The transition system JZ satisfies a cPLTL formula cp with respect to a variable valuation a, if the 
trace of every path through satisfies cp with respect to a. The cPLTL model checking problem asks, 
given a transition system and a cPLTL formula (p, whether Z’ satisfies (p with respect to some a. 

Theorem 1, The cPLTL model checking problem is PS?ACE-complete. 

The proof we give below is a generalization of the one for PROMPT-LTL by Kupferman et al. lITSl . 
We begin by showing PSPACE-membership. First note that we can restrict ourselves to cPLTLp formulas: 
given a cPLTL formula cp, let cp' denote the formula obtained by recursively replacing every subformula 
G<vV^ by t/rVX(-ifcU(-'fcA t/r)). Due to Lemma|2]and the discussion below it, every transition system ^ 
satisfies (p with respect to some a if and only if JZ satisfies (p' with respect to some a'. 

Recall that p is the distinguished atomic proposition used to relativize cPLTL formulas. A colored 
Biichi graph with costs (V,vj,E,£,cst,E) consists of a finite direct graph {V,E), an initial vertex vj, a 
labeling function £: V ^ a cost-function cst: £ —> N, and a set F C F of accepting vertices. A 
path V 0 V 1 V 2 • • • is pumpable, if each of its blocks induced by p contains a vertex repetition such that the 
cycle formed by the repetition has non-zero cosjl. Note that we do not have a requirement on the cost of 
the tail, if the path has one. The path is fair, if it visits E infinitely often. The pumpable non-emptiness 
problem asks, given a colored Biichi graph with costs, whether it has an initial pumpable fair path. 

Lemma 4 . If a colored Biichi graph with costs has an initial pumpable fair path, then also one of the 
form TloTl^ with \7lo7li \ G &{n^), where n is the number of vertices of the graph. 

Let y = {S,si,E,£,cst) be a transition system and let tp be acPLTLp formula. Furthermore, consider 
the LTL formula % = (GFp AGF-ip) G-)- GFfC, which is satisfied by a cost-trace, if the trace has infinitely 
many changepoints if and only if it has cost 00 . Now, let 21 = ,qj,5,E) be a nondeterministic 

Biichi automaton recognizing the models of the LTL formula -irel((p) A which we can pick such 
that its number of states is bounded exponentially in |(p|. Now, define the colored Biichi graph with 
costs y = {S X Qx 2^P\{si,qi,lb),E' ,£' ,csi' ,E') where 

• {{s,q,C),{s',q',C')) G E' if and only if {s,s') G E and q' G UC), 

• £{s,q,C) = C, 

• cst'{{s,q,C), {s',q',C')) = cst{s,s'), and 

*We encode the weights in binary, although the algorithms we present are oblivious to the exact values of the weights. 

^Note that our definition is more involved than the one of Kupferman et al., since we require a cycle with non-zero cost 
instead of any circle. 
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• F' = SxF 

Lemma 5, [cp. Lemma 4.2 of SC does not satisfy tp with respect to any a if and only if 5^ x 21 has 
an initial pumpable fair path. 

Now, we are ready to prove Theorem [U 

Proof. PSPACE-hardness holds already for LTL Il24l . which is a fragment of cPLTL. Membership is 
witnessed by the following algorithm: check whether the colored Biichi graph ,5^ x 21 has an initial 
pumpable fair path, which is correct due to Lemma[5] But as the graph is of exponential size, it has to be 
constructed and tested for non-emptiness on-the-fly. 

Due to Lemma|4j it suffices to check for the existence of an ultimately periodic path TtoTif such that 
\'itQ'iti I < n G X 2l|), i.e., n is exponential in the size of tp and linear in the size of To this end, 

one guesses a vertex v (the first vertex of 7t\) and checks the following reachability properties: 

1. Is V reachable from v/ via a path where each block contains a cycle with non-zero cost? 

2. Is V reachable from v via a non-empty path that visits an accepting vertex and which either has no 
changepoint or where each block contains a cycle with non-zero cost? In this case, we also require 
that V and the last vertex on the path from v/ to v guessed in item[T]) differ on their third component 
in order to make v a changepoint. This spares us from having a block that spans tiq and 7t\. 

All these reachability problems can be solved in non-deterministic polynomial space, as a successor of a 
vertex of o?’ x 21 can be guessed and verified in polymonial time and fhe lengfh of fhe pafhs fo be guessed 
is bounded by n, which can be represenfed wifh polynomially many bifs. □ 

Furthermore, from fhe proof of Lemma [H we obfain an exponential upper bound on fhe values 
of a safisfying variable valuation, if one exisfs. This is asymptotically fighf, as one can already show 
exponential lower bounds for PROMPT-LTL HSl. 

Corollary 1. Fix a transition system .5F and a cPLTL-formula (p such that SC satisfies tp with respect to 
some ot. Then, SC satisfies (p with respect to a valuation that is bounded exponentially in the size of (p 
and linearly in the number of states of SC and in the maximal cost in SC. 

Dually, using pumping argumenfs one can show fhe exisfence of an exponenfial variable valuation 
fhaf wifnesses whefher a given cPLTLq specification is safisfied wifh respecf fo every variable valuafion. 

Lemma 6. Fix a transition system SC and a cPLTLQ-formula (p such that SC does not satisfy tp with 
respect to every a. Then, SC does not satisfy tp with respect to a valuation that is bounded exponentially 
in the size of tp and linearly in the number of states of SC and in the maximal cost in SC. 

The proof of fhe preceding Lemma is similar fo fhe one of Lemma 7 in ifT^ . 


5 Infinite Games 

An arena sF = (P,Vb,V'i,V 7 ,£',£,csl) consisfs of a finife direcfed graph {y,E), a partition (Vb)k'i) of V, 
an inifial verfex v/ G P, a labeling i: V ^ 2^, and a cosl funcliorlj cst: E ^ N. Again, we assume fhaf 
every vertex has af leasf one successor to avoid dealing wifh finite pafhs. Also, we again ensure our 
requiremenf on fhe proposition K to indicate fhe sign of fhe cosfs in a cosf-frace: if fc G i{v'), fhen we 
require csl(v ,v ')>0 for every edge (v,v') G E leading to V. Dually, if fC ^ then cst(v,v') = 0 for 
every edge (v,v') G £". 

^ Again, we encode the weights in binary, although the algorithms we present are oblivious to the exact values of the weights. 
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A play p = P 0 P 1 P 2 • • • is a path through £/ starting in v/ and its cost-trace tr(p) is defined as 
tr(p) = £{po) cst (po, Pi )£{pi) cst(pi, P 2 ) ^(P 2 ) cst(p 2 , Ps) • • • • 

A strategy for Player i G {0,1} is a mapping a: V*Vi —> V satisfying (v, a(wv)) G E for every w G P* 
and V G V;-. A play p is consistent with a if p„+i = o{po---pn) for every n with p„ G V)-. 

A cPLTL game W = {£/, <p) consists of an arena £/ and a winning condition cp, which is a cPLTL 
formula. A strategy a for Player 0 is winning with respect to some variable valuation a, if the trace of 
every play that is consistent with a satisfies fhe winning condition (p wifh respecf fo a. 

We are inferesfed in defermining whefher Player 0 has a winning sfrafegy for a given cPLTL game, 
and in defermining a winning sfrafegy for her if fhis is fhe case. 

Theorem 2. Determining whether Player 0 has a winning strategy in a given cPLTL game is 2ExpTime- 
complete. Furthermore, a winning strategy (if one exists) can be computed in doubly-exponential time. 

Our proof fechnique is a generalizafion of fhe one for infinife games wifh PLTL winning condi¬ 
tions II 29 II . which in fum exfended Kupferman ef al.’s solufion for fhe PROMPT-LTL realizabilify prob¬ 
lem ifTSl . Firsf, we note fhaf if is again sufficienl fo consider cPLTLp formulas, as we are interested in fhe 
existence of a variable valuafion (see fhe discussion below Lemma |2l). Nexf, we apply fhe alternating- 
color technique: fo fhis end, we modify fhe arena fo allow Player 0 fo produce colorings of plays of fhe 
original arena and use fhe relativized winning condition, i.e., we reduce fhe problem fo a game wifh LTL 
winning condition. The winner (and a winning sfrafegy) of such a game can be compufed in doubly- 
exponenfial time 11211 l22ll . 

To allow for fhe coloring, we double fhe vertices of fhe arena, addifionally label one copy wifh p and 
fhe ofher nof, and splif every move info fwo: firsf, fhe player whose fum if is picks an oufgoing edge, 
fhen Player 0 decides in which copy she wanfs fo visif fhe fargef, fhereby picking fhe frufh value of p. 

Formally, given sZ = {y,VQ,V\,vj,E,l,c&t), fhe extended arena sZ' = (P',VqjP^vJ, csf') con- 
sisfs of 

• P' = Px{0,l}U£', 

• Vo' = Vo X {0,1} UF and V/ = Vi x {0,1}, 

• vj = (v/,0), 

• E' = {((v,0),e),((v,l),c),(e,(v',0)),(e,(v',l)) \ e = {v,v') GF}, 

• l'(e) = 0 for every e G F and i'{v,b) = J ^ b 0, 

[£(v)U{p} ifb = \, 

• csl'((v,f?), (v,v')) =csf(v,v') and csl'((v,v'), (v',f?')) = 0. 

A pafh fhrough has fhe form (po,^o)^o(Pb^i)^i(P 2 ,^ 2 ) ■ • ■ for some pafh poPiPi ■ ■ ■ through £/, 
where e„ = (p«,p«+i) and b„ G {0,1}. Also, we have G Note that we use the costs in 

only to argue the correctness of our construction, not to define the winning condition for the game in . 

Also note that the additional choice vertices of the form c G F have to be ignored when it comes 
to evaluating the winning condition on the trace of a play. Thus, we consider games with FTF win¬ 
ning conditions under so-called blinking semantics: Player 0 wins a play p = P 0 P 1 P 2 ■ • ■ under blinking 
semantics, if £(po)£{p 2 )i{p 4 ) ■ ■ ■ satisfies the winning condition (p; otherwise. Player 1 wins. Winning 
strategies under blinking semantics are defined as expected. Determining whether Player 0 has a winning 
strategy for a given game with FTF winning condition under blinking semantics is 2ExpTlME-complete, 
which can be shown by a slight variation of the proof for FTF games under classical semantics 1^1221 . 
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Furthermore, if Player 0 has a winning strategy for such a game, then also a finite-state one of at most 
doubly-exponential size in | (p |. 

Such a strategy for an arena {V,Vo,Vi,vi,E,£,cst) is given by a memory structure ^ = (M,nr/,upd) 
with a finite set M of memory states, an initial memory state mj G M, and an update function upd: M x 
V ^M, and by a next-move function nxt: VqxM satisfying (v, nxt(v, m)) for every m and every 
V. The function upd*: F+ Mis defined via upd*(v) = mj and upd*(wv) = upd(upd*(w),v). Then, fhe 
sfrafegy a implemenfed by ^ and nxf is defined by a{wv) = nxf(v, upd*(>vv)). The size of a is (slighfly 
abusively) defined as \M\. 

Given a game {£/, tp) wifh cPLTLp winning condition tp, define as above and lef tp' = rel{(p) Ax, 
where X = (GFp AGF-ip) ■<->■ GFfC. Recall fhaf x is satisfied by a cosf-frace, if fhe frace has infinifely 
many changepoinfs if and only if if has cosf oo. 

Lemma 7. [cp. Lemma 3.1 of UlSil ] Player 0 has a winning strategy for , (p) with respect to some ot 
if and only if she has a winning strategy for {s/', tp') under blinking semantics. 

Now, we are able fo prove Theorem |2] 

Proof. Hardness follows immediafely from fhe 2ExpTlME-hardness of defermining fhe winner of an 
LTL game 1121112211 , as LTL is a fragmenf of cPLTL. 

Membership in 2ExpTime follows from fhe reducfions described above: firsl, we fum fhe winning 
condition info a cPETEf formula and consfrucf fhe ETE game under blinking semantics obfained from 
expanding fhe arena and relafivizing fhe winning condition. This game is only polynomially larger fhan 
the original one and its winner (and a winning strategy) is computable in doubly-exponential time. □ 

Erom the proof of Eemma|7J we obtain a doubly-exponential upper bound on the values of a satisfying 
variable valuation, if one exists. This is asymptotically tight, as one can already show doubly-exponential 
lower bounds for PROMPT-ETE ll29]| . 

Corollary 2. Eix a cPLTL game ^ = (j?/, tp) such that Player 0 has a winning strategy for ^ with 
respect to some a. Then, Player 0 has a winning strategy for ^ with respect to a valuation that is 
bounded doubly-exponentially in the size of tp and linearly in the number of vertices of and in the 
maximal cost in . 

6 Parametric LDL with Costs 

Einear Dynamic logic (EDE) |[T4l l26l extends ETE by temporal operators guarded with regular expres¬ 
sions, e.g., (r) tp holds at position n, if there is a j such that tp holds at position n + j and the infix befween 
posifions n and n + j mafches r. The resulfing logic has fhe full expressiveness of fhe m-regular languages 
while refaining many of ETE’s desirable properties like a simple synfax, infuifive semantics, a polyno¬ 
mial space algorifhm for model checking, and a doubly-exponential fime algorifhm for solving games. 
Paramefric EDE (PEDE) ifTSl allows fo parameferize such operators, i.e., holds af position n wifh 

respecf fo a variable valuafion a, if fhere is a y < a{x) such fhaf q) holds af posifion n + j and fhe infix 
befween posifions n and n + j mafches r. Model checking and solving games wifh PEDE specifications 
is nof harder fhan for ETE, alfhough PEDE is more expressive and has parameferized operators. In fhis 
section, we consider cPEDE where fhe paramefers bound fhe cosf of fhe infix instead of fhe lengfh. 
Eormally, formulas of cPEDE are given by fhe grammar 

(p:: = p I ^p I (pA(p\ (pWtpl {r)(p \ [r](p \ {r)^^(p \ [rj^^tp 
r::=(j) \ q)l \ r +r \ r-,r \ r* 
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where p € P, z € and where 0 ranges over propositional formulas over P. As for cPLTL, ePLDL 
formulas are evaluated on eost-traces with respect to variable valuations. Satisfaction of atomic formulas 
and of conjunctions and disjunctions is defined as usual, and for the four temporal operators, we define 

• {w,n, a) \= (r) (p if fhere exisfs j >0 such fhaf {n,n + j) G a) and {w,n + j, a) \= (p, 

• {w,n,a) \= [r] (p if for all 7 > 0 wifh {n,n + j) G ^{r,w,a) we have {w,n + j,a) \= (p, 

• {w,n,a)\= (r) (p if fhere exisfs 7 > 0 wifh csf(>v„c„ ■ •< a{z) such fhaf {n,n + j)^ 
^{r,w,a) and {w,n + j,a) ^ (p, and 

• {w,n,a) \= [r]^^(p if for all 7 > 0 wifh csf(w„c„• •< a{z) and wifh {n,n + 7) G 
^{r,w,a) we have {w,n + j,a) \= (p. 

Here, fhe relation I^{r,w,a) C N x N confains all pairs {m,n) such fhaf mafches r and is 

defined inducfively by 

• ^{(j),w,a) = {{n,n + 1 ) I >v„ 1 = (j)} for propositional (p, 

• I%{\l/l,w,a) = {{n,n) I {w,n,a) \= t/r}, 

• + n, w, a) = M{r(),w, a) U^(ri,w, a), 

• ^(ro;ri,w,a} = {(no,n 2 ) | s.f. (no,ni) G ^(ro,w,a) and {n\,n 2 ) G^(ri,w,a)}, and 

• ^%{r*a) = {{n,n) | n G N} U {(no,'^t:+i) | 3ni,. ..,?!* s.f. {nj^nj^i) G .^(r,w, a) for all 7 < k}. 

Again, we resfricf ourselves fo formulas where fhe sef of variables parameferizing diamond operafors 
and fhe sef of variables parameterizing box operafors are disjoinf. Analogues of Lemma[T]and Lemma|2] 
hold for cPLDL, too. 

The alternating-color is applicable fo PLDL ifTSl : fo fhis end, one infroduces changepoinf-bounded 
varianfs of fhe diamond- and fhe box-operafor whose semantics only quanlify over infixes wifh af mosf 
one changepoinf. LDL formulas wifh changepoinf-bounded operafors can be franslafed info Biichi au- 
fomafa of exponential size. This allows fo extend fhe algorifhms for model-checking and realizabilify 
based on fhe alternating-color fechnique lIT^ to PLDL. Even more so, fhe algorifhms presenfed in Sec¬ 
tion |4] and Section |5]can easily be adapted fo cPLDL as well, again relying on fhe franslafion to Biichi 
aufomafa via changepoinf-bounded operafors. 

Theorem 3. The cPLDL model checking problem is PSFACE-complete and determining the winner of 
games with cPLDL winning conditions is lExvTlME-complete. 


7 Multiple Cost Functions 

In fhis secfion, we consider parameferized temporal logics wifh multiple cosl-funcfions. For fhe sake of 
simplicify, we resfricf our affenfion fo cPLTL, alfhough all resulfs hold for cPLDL, loo. 

Fix some dimension d gN. The synlax of mull-cPFTF is oblained by equipping fhe parameterized 
temporal operafors by a coordinate i G {l,...,d}, denoted by F<_._c and G<,y. In fhis confexl, a cosl- 
frace is of fhe form wocowi ci W 2 C 2 • ■ • where w„ G 2^ and c„ G N^. Thus, for every / G {1,... ,d}, we 
can define csl,(woCo • • -Cn-iw^) = EjLo(cj)i for every finite cosl-frace wqCo • • Furfhermore, we 

require for every coordinale i a proposition Ki such fhaf fc,- G w„+i if and only if (c„)/ > 0. 

The semanlics of alomic formulas, boolean connectives, and unparamelerized temporal operafors are 
unchanged and for fhe parameferized operafors, we define 
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• {w,n,a) \=F<.^(p if and only if there exists a 7 > 0 with cst,(w„c„ • • • < a(z) such that 

(w,n + j,a) ^ (p, and 

• {w,n,a) ^ if and only if for every 7 > 0 with cst,(>v„c„• ■ < a{z): {w,n + 

j,oc)h9- 

Again, we restrict ourselves to formulas where no variable parameterizes an eventually- and an 
always-operator, but we allow a variable to parameterize operators with different coordinates. Analogues 
of Lemma[T]and Lemma|2]hold for mult-cPLTL as well. 

Example 2. A Streett condition with costs {Qi,Pi)i^{i^...j} iEZ!/ can be expressed in mult-cPLTL via 

. 

In this setting, we consider the model checking problem for transition systems with d cost functions 
and want to solve games in arenas with d cost functions. 

The alternating-color technique is straightforwardly extendable to mult-cPLTL: one introduces a 
fresh proposition pi for each coordinate i and defines X = Af=i ((GF pi A GF^Pi) A^GFfC,). Furthermore, 
the notions of /-blocks, k-boundedness in coordinate /, and k-spacedness in coordinate i are defined as 
expecfed. Then, fhe proofs presenfed in Secfion|4]and Secfion[5]remain valid in fhis selling, loo. 

In Ihe case of model-checking, Ihe Ihird componenl of Ihe colored Biichi graph x 21 has Ihe 
form 2 ^Pi,--Pd}^ j e ^ exponenlial. However, Ihis is no problem, as Ihe automaton 21 is already of 
exponential size. Similarly, in Ihe case of infinite games, each vertex of Ihe original arena has 2^ copies 
in one for each elemenl in allowing Player 0 to produce appropriate colorings wilh Ihe 

propositions pi. The resulting game has an arena of exponential size (in Ihe size of Ihe original arena 
and of Ihe original winning condition) and an LTL winning condition under blinking semantics. Such a 
game can still be solved in doubly-exponenlial time. To Ihis end, one lums Ihe winning condition into 
a deterministic parity automaton of doubly-exponenlial size wilh exponentially many colors, conslrucls 
Ihe producl of Ihe arena and Ihe parity automaton, which yields a parity game of doubly-exponenlial size 
wilh exponentially many colors. Such a game can be solved in doubly-exponenlial time (231. 

Theorem 4. The mult-cPLTL model checking problem is PSPACE-conrp/ete and determining the winner 
of games with mult-cPLTL winning conditions is 2ExpTlME-complete. 

Again, Ihe same resulls hold for mull-cPLDL, which is defined as expected. 


8 Optimization Problems 

If is nalural to Ireal model checking and solving games wilh specifications in parameterized linear tem¬ 
poral logics as an optimization problem: determine Ihe optimal variable valuation such lhal Ihe system 
satisfies Ihe specification wilh respecl to if. For parameterized evenlualilies, we are interested in mini¬ 
mizing Ihe waiting times while for parameterized always’, we are interested in maximizing Ihe waiting 
times. Due to Ihe undecidabilily resulls for nol well-defined formulas one considers Ihe optimization 
problems for Ihe unipolar fragmenls, i.e., for formulas having eilher no parameterized evenlualilies or 
no parameterized always’. In Ihis section, we presenl algorilhms for such optimization problems given 
by cPLTL specifications. In Ihe following, we encode Ihe weighls of Ihe Iransilion system or arena un¬ 
der consideration in unary to oblain our resulls. Whelher Ihese resulls can also be shown for a binary 
encoding is an open question. 

For model checking, we are interested in Ihe following four problems: given a Iransilion system 
and a cPLTLf formula (f>^ and a cPLTLq formula tpQ, respectively, determine 


M. Zimmermann 


155 


1. niin|Q;|^ satisfies ipp w.r.t. «} l^i'^x6varp((pp) Ot(x), 

2. min|o;|^ satisfies (Pf w.r.t. «} l^^^;cevarF(<PF) ^(''')> 

3. maX|Q(|^ satisfies (pa w.r.t. a} I^^^3'evarG(<PG) ® (l^)’ 

4. niaX|Q(|^ satisfies (pQ w.r.t. a} ®i^)'evarG(ipG) ® (l^)‘ 

Applying the monotonicity of the parameterized operators and (in the first case) the alternating-color 
technique to all but one variable reduces the four optimization problems to ones where the specification 
has a single variable. Furthermore, the upper bounds presented in Corollary [T] and in Lemma 0 yield an 
exponential search space for an optimal valuation: if this space is empty, then there is no a such that JZ 
satisfies with respect to a in the first two cases. On the other hand, if the search space contains every 
such a, then =5^ satisfies <Pg with respect to every a in the latter two cases. 

Thus, it remains the check whether the specification is satisfied with respect to some valuation that is 
bounded exponentially. In this setting, one can construct an exponentially sized non-deterministic Buchi 
automaton recognizing the models of the specification with respect to the given valuation (using a slight 
adaption of the construction presented in Il29l accounting for the fact that we keep track of cost instead 
of time). This automaton can be checked for non-emptiness in polynomial space using an on-the-fly 
construction. Thus, an optimal a can be found in polynomial space by binary search. 

Theorem 5. The cPLTL model checking optimization problems can be solved in polynomial space. 

A similar approach works for infinite games as well. Here, we are interested in computing 

1. min|Q;|p[ 0 winning strategy fori% w.r.t. a} l^i'^A:evarF((pF) 

2. min|Q,|p2 q Jj^s winning strategy for^F w.r.t. a} ^l^^xevarFftpF) 

3. min|Q;|p[ o winning strategy fori^G w.r.t. a} I^i'^jc€varG(<PG) 

4. min|Q;|p[ q Jj^s winning strategy for^G w.r.t. a} I^^^jrgvatGfipG) 

and witnessing winning strategies for given cPLTL games with cPLTLp winning condition (f>p and 

with cPLTLg winning condition <Pg- 

Again, one can reduce these problems to the case of winning conditions with a single variable and 
by applying determinacy of games with respect to a fixed valuation, it even suffices to consider the case 
of cPLTLf winning conditions with a single variable, due to duality of games: swapping the players 
in a game with cPLTLg winning condition yields a game with cPLTLf winning condition. Corollary |2] 
gives a doubly-exponential upper bound on an optimal variable valuation. Hence, one can construct a 
deterministic parity automaton of triply-exponential size with exponentially many colors recognizing the 
models of the specification with respect to a fixed variable valuation a that is below the upper bound 
(again, see ll2^ for the construction). Player 0 wins the parity game played in the original arena but 
using the language of the automaton as winning condition if and only if she has a winning strategy for 
the cPLTLf game with respect to a. Such a parity game can be solved in triply-exponential time 12^ . 
Theorem 6. The cPLTL optimization problems for infinite games are solvable in triply-exponential time. 

Furthermore, the same results hold for cPLDL using appropriate adaptions of the automata construc¬ 
tions presented in ifTSlfT^ . 

Theorem 7. The cPLDL model checking optimization problems can be solved in polynomial space and 
the cPLDL optimization problems for infinite games can be solved in triply-exponential time. 

However, for parameterized logics with multiple cost-functions, these results do not remain valid, 
as one cannot reduce the optimization problems to ones with a single variable, as a variable may bound 
operators in different dimensions. Thus, one has to keep track multiple costs, which incurs an exponential 
blow-up when done naively. Whether this can be improved is an open question. 
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9 Conclusion 

We introduced parameterized temporal logics whose operators bound the accumulated cost instead of 
time as usual: cPLTL and cPLDL as well as their variants mult-cPLTL and mult-cPLDL with multiple 
cost functions retain the attractive algorithmic properties of LTL like a polynomial space model check¬ 
ing algorithm and a doubly-exponential time algorithm for solving infinite games. Even the optimization 
variants of these problems are not harder for cPLTL and cPLDL than for PLTL: polynomial space for 
model checking and triply-exponential time for solving games. However, it is open whether these prob¬ 
lems are harder for logics with multiple cost functions. Another open question concerns the complexity 
of the optimization problem for infinite games: can these problems be solved in doubly-exponential time, 
i.e., is finding optimal variable valuations as hard as solving games? Nofe fhaf fhis question is already 
open for PLTL. Finally, one could consider weighfs from some arbifrary semiring and corresponding 
weighfed parameferized femporal logics. 
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